RCE in Warpdotdev Warp

CVE-2026-54686

Warp is an agentic development environment. From 0.2021.04.25.23.05.stable_00 until 0.2026.05.06.15.42.stable_01, Warp accepted certain state-mutating terminal lifecycle hooks from the PTY stream without verifying that the hooks were emitted by Warp's shell integration for the active session. An attacker who could cause a victim to view attacker-controlled terminal output in Warp could spoof selected lifecycle metadata, including the current working directory reported for the active block or SSH session transport metadata. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.

Vulnerability class: Command Injection (OS Command Injection)

Published · last modified .

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L.

EPSS exploit prediction

EPSS: 0.004 (32.1th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 32nd percentile — 32.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2026-54686: held from 0.004 to 0.004.

EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000

Affected products

  • Warpdotdev Warp — versions >= 0.2021.04.25.23.05.stable_00, < 0.2026.05.13.09.15.stable_01

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2026-54686?
CVE-2026-54686 is a medium-severity vulnerability in Warpdotdev Warp, classified under OS Command Injection. CVSS score: 4.3/10. Published 2026-06-24.
How severe is CVE-2026-54686?
Medium severity. CVSS v3 base score is 4.3 out of 10.
Is CVE-2026-54686 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.